Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jOQkKLcTWO5Zmigl21mSXb96aLE.roa
File: jOQkKLcTWO5Zmigl21mSXb96aLE.roa (raw, json)
Hash identifier: 6yV9j4JQD3bp2fiMUOsW2cEf/HNrXPEjcyiQOtXIMcw=
Subject key identifier: 8C:E4:24:28:B7:13:58:EE:59:9A:28:25:DB:59:92:5D:BF:7A:68:B1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C10B00BB2EAC7B36F675400E25CC84D35
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jOQkKLcTWO5Zmigl21mSXb96aLE.roa
Signing time: Mon 27 Nov 2023 12:10:21 +0000
ROA not before: Mon 27 Nov 2023 12:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 194.50.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:b0:0b:b2:ea:c7:b3:6f:67:54:00:e2:5c:c8:4d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 27 12:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ce42428b71358ee599a2825db59925dbf7a68b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:79:74:40:f0:e4:6a:02:40:4f:09:d1:8f:
6c:b3:f2:9f:a1:d7:46:c6:1b:b8:dc:bf:79:a2:9b:
7f:1d:66:57:38:4c:29:20:1d:95:0b:9d:42:70:45:
66:ff:85:1b:42:a1:81:a5:3c:3c:2f:e6:06:3f:a2:
4e:ae:16:b4:78:5c:10:11:f1:57:64:1e:fe:e6:6e:
cb:63:a2:74:cb:51:ee:15:b4:e4:e3:d5:4e:31:6b:
13:88:3c:69:67:b7:86:79:f3:24:42:2f:58:ec:10:
93:54:50:6e:61:51:42:d8:88:27:a0:32:77:55:da:
1a:ff:6f:bf:00:01:ad:6f:26:4d:40:37:06:48:fc:
5c:a0:15:6c:44:58:5b:65:d2:78:d6:24:e4:76:0a:
0e:b8:83:5b:b6:46:1e:4c:ce:d3:65:43:cf:a1:f9:
09:19:70:06:78:d8:c8:0f:f0:03:d1:63:d4:82:4d:
6a:d9:80:09:81:83:34:82:a1:94:bf:e1:c8:cd:48:
c3:12:a7:91:52:a0:9d:73:fd:bd:43:aa:f4:b3:a5:
fc:85:f3:77:cf:88:d2:b6:47:83:be:32:d7:5f:c2:
d4:62:1a:a1:bf:07:62:ab:e0:7e:a2:f4:8f:cd:cc:
61:a0:a8:9b:9f:f0:31:33:ec:a4:b2:e0:25:21:4a:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:24:28:B7:13:58:EE:59:9A:28:25:DB:59:92:5D:BF:7A:68:B1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jOQkKLcTWO5Zmigl21mSXb96aLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f0:17:04:bd:ae:8a:d5:be:51:c9:9e:c9:80:b7:58:a1:00:
23:2a:db:5c:f8:89:35:af:26:9c:63:78:c1:43:a2:9d:69:ac:
d9:62:6a:e3:d6:40:fe:e0:34:8e:14:3c:1f:3e:16:ec:47:41:
69:07:a6:8e:ec:9d:34:90:8c:70:50:51:c7:a8:1d:14:bd:cb:
6a:20:8e:93:a2:00:b5:14:ef:a0:5e:5b:7d:05:38:c3:d0:fd:
04:2e:c1:b6:75:f8:f9:6d:90:d7:4b:4c:a4:62:29:f5:7d:e6:
48:94:51:68:fb:3a:7a:2f:65:db:b7:bf:77:7e:43:cf:66:66:
53:1b:2e:89:ff:dd:00:31:3e:c5:21:a2:40:49:15:e1:56:4b:
8e:12:5e:09:b1:66:c9:49:fb:37:6b:0c:d7:f4:ad:2e:b2:89:
ad:a3:b4:54:72:a9:2a:50:a4:3a:bb:22:99:b8:7c:c7:3d:b0:
a0:f1:1d:42:60:34:ed:39:20:3d:33:72:f3:d3:fb:26:71:ad:
89:08:6e:12:3d:82:12:72:8c:18:1a:23:e9:1b:53:8a:43:3e:
c8:a1:77:2f:7b:c2:45:8f:9c:de:c1:2c:ea:e5:a9:2e:3e:49:
87:87:7a:d2:7a:cd:df:05:bf:1c:de:31:a9:d5:a6:c8:bd:9a:
26:c9:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 07:05:09 2023 by rpki-client on console-ams.rpki-client.org